Privacy Policy

Welcome to SoulSync Lab ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website https://www.soulsynclab.com/ (the "Website") or use our services, including our contact form and mini-shop for course bookings. This policy complies with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws.

1. Controller Information

The data controller responsible for your personal data is:

​

SoulSync Lab, Banu Sahan
Loes van Marlestraat, 11, 1382 ML, Weesp
Email: info@soulsynclab.com
​

If you have any questions about this Privacy Policy or our data practices, please contact us at the above email address.

2. Hosting and Domain

Our Website is hosted by Wix.com Ltd., located at 40 Namal Tel Aviv St., Tel Aviv, Israel, with data processing also occurring through Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, CA 94158, USA. We have entered into a Data Processing Agreement with Wix to ensure compliance with GDPR requirements. For data transfers to Israel, an adequacy decision by the European Commission ensures an appropriate level of data protection. For transfers to the USA, Wix relies on Standard Contractual Clauses to safeguard your data.

​

Our domain is registered through GoDaddy Operating Company, LLC, located at 2155 E. GoDaddy Way, Tempe, AZ 85284, USA. GoDaddy may process limited personal data related to domain registration, such as your name and contact details, as outlined in their Privacy Policy.

3. Personal Data We Collect

We collect personal data you provide directly, data collected automatically, and data from third parties, as described below:

3.1 Data You Provide

• Contact Form: When you submit our contact form, we collect your name, email address, phone number, and any other information you choose to provide, e.g., your message content.

• Shop for Course Bookings: When you book a course through our shop, we collect your name, email address, billing address, phone number, and payment details.

• Payment Information: Payments are processed securely through Wix Payments, supporting in-person payments, iDeal, Credit/Debit Cards, Google Pay, and Apple Pay. We do not store your full payment card details; these are handled by Wix Payments or their payment processors (e.g., Stripe for Google Pay and Apple Pay). For in-person payments, we may collect limited data to confirm payment.

3.2 Data Collected Automatically

When you visit our Website, we may collect:

​

• Usage Data: IP address, browser type, operating system, pages visited, time spent on the Website, and referring URLs.

• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience, analyze Website performance, and personalize content. For details, see below.

3.3 Data from Third Parties

• Wix Analytics: Wix provides us with aggregated data about Website usage to improve our services.

• Payment Processors: Our payment providers (e.g., Wix Payments, iDeal, Google Pay, Apple Pay) may share transaction confirmation data to fulfill your bookings.

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes, based on the legal grounds outlined in the GDPR:

​

• To Provide Our Services (Art. 6(1)(b) GDPR): Processing your contact form submissions and course bookings, including payment processing, to fulfill our contract with you.

• To Communicate with You (Art. 6(1)(b) and (f) GDPR): Responding to your inquiries and providing customer support, based on our legitimate interest in maintaining customer relationships.

• To Improve Our Website (Art. 6(1)(f) GDPR): Analyzing usage data to enhance Website functionality and user experience, based on our legitimate interest in improving our services.

• To Comply with Legal Obligations (Art. 6(1)(c) GDPR): Retaining certain data (e.g., transaction records) to meet Dutch tax and accounting requirements.

• With Your Consent (Art. 6(1)(a) GDPR): Using non-essential cookies or sending marketing emails, where you have explicitly agreed.

5. Sharing Your Personal Data

We may share your personal data with:

​

• Service Providers:

  • Wix: Hosts our Website and processes data for contact forms, shop functionality, and payments.

  • Payment Processors: Wix Payments and its partners (e.g., Stripe for iDeal, Google Pay, and Apple Pay) process payments securely.

  • GoDaddy: Manages our domain registration and may process limited contact data.

• Legal Authorities: If required by law, such as to comply with Dutch or EU regulations or respond to a court order.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity, with appropriate safeguards.

We ensure all recipients comply with GDPR requirements, using contracts or adequacy mechanisms for international transfers.

6. International Data Transfers

Your data may be transferred to:

​

• Israel: Wix’s servers, covered by an EU adequacy decision.

• USA: Wix Inc. and GoDaddy, using Standard Contractual Clauses or equivalent safeguards to ensure GDPR compliance.

We take steps to protect your data during international transfers, in line with GDPR requirements.

7. Data Retention

We retain your personal data only as long as necessary:

​

• Contact Form Data: For 12 months after your inquiry, unless further communication is required.

• Booking and Payment Data: For 7 years, as required by Dutch tax and accounting laws.

• Usage Data: For 24 months, to analyze Website performance.

Data is securely deleted or anonymized once the retention period expires, unless further retention is legally required.

8. Cookies and Tracking

We use cookies to operate and improve our Website. These include:

• Essential Cookies: Necessary for Website functionality, such as maintaining your session during checkout.

• Analytics Cookies: Help us understand how visitors use our Website, provided by Wix Analytics.

You can manage cookie preferences through your browser settings or our Cookie Consent Tool. 

9. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

​

• Access: Request a copy of your data.

• Rectification: Correct inaccurate data.

• Erasure: Request deletion of your data, subject to legal obligations.

• Restriction: Limit how we process your data in certain cases.

• Portability: Receive your data in a structured, machine-readable format.

• Objection: Object to processing based on legitimate interests, including marketing.

• Withdraw Consent: Revoke consent at any time, where processing relies on consent.

To exercise these rights, contact us at info@soulsynclab.com. We will respond within one month, extendable by two months for complex requests. If you are unsatisfied with our response, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl.

10. Security Measures

We implement technical and organizational measures to protect your data, including:

​

• Encryption of data in transit (HTTPS) and at rest by Wix.

• Secure payment processing through Wix Payments and its partners.

• Regular security updates to our Website infrastructure.

Despite these measures, no online system is completely secure. We strive to protect your data but cannot guarantee absolute security.

11. Third-Party Links

Our Website may contain links to third-party websites, such as payment providers, or external websites. We are not responsible for their privacy practices. Please review their privacy policies before sharing personal data.

12. Children’s Privacy

Our Website and services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us to request its deletion.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our Website with a revised "Last Updated" date. Please review this policy periodically.

14. Contact Us

For questions, concerns, or to exercise your data protection rights, please contact:

SoulSync Lab
Loes van Marlestraat, 11, 1382 ML, Weesp
Email: info@soulsynclab.com